[Hamara-devel] Certificate problem in downloading hamara linux iso through command line tools

[shirish]

additional at bottom :-

On Tuesday 13 October 2015 10:05 AM, shirish wrote:
> Dear Akshat,
>
> It seems that the URL re-directs to some mirror internally.
>
> Do
>
> $ curl -# -O -L -v
> http://downloads.hamaralinux.org/final/hamara_1.0.3_amd64.iso
>
> And you will see it starts to download as well as you see what is
> happening at the back-end a bit.
>
> There is also --trace-ascii which you can also use for debugging
> purposes if needed.
>
> -L is the crucial bit here as per man page
>
> -L, --location
>                (HTTP/HTTPS) If the server reports that the requested
> page has moved to a different location (indicated with a Location:
> header and a  3XX  response  code),  this  option  will make curl redo
> the request on the new place. If used together with -i, --include or -I,
> --head, headers from all requested pages will be shown. When
> authentication is used, curl only sends its credentials to the  initial
> host. If a redirect takes curl to a different host, it won't be able to
> intercept the user+password. See also --location-trusted on how to
> change this. You can limit the amount of redirects to follow by using
> the --max-redirs option.
>
>                When curl follows a redirect and the request is not a
> plain GET (for example POST or PUT), it will do the following request
> with a GET if the HTTP response was 301, 302, or 303. If the response
> code was any other 3xx code, curl will re-send the following request
> using the same unmodified method.
>
>                You can tell curl to not change the non-GET request
> method to GET after a 30x response by using  the  dedicated  options
> for  that:  --post301, --post302 and -post303.
>
> Let us know if you still get errors after trying the above flag/switch.
>

This is how it looks at my end :-

  curl -# -O -L -v 
http://downloads.hamaralinux.org/final/hamara_1.0.3_amd64.iso
*   Trying 81.187.100.26...
* Connected to downloads.hamaralinux.org (81.187.100.26) port 80 (#0)
 > GET /final/hamara_1.0.3_amd64.iso HTTP/1.1
 > Host: downloads.hamaralinux.org
 > User-Agent: curl/7.45.0
 > Accept: */*
 >
< HTTP/1.1 301 Moved Permanently
< Date: Tue, 13 Oct 2015 04:28:56 GMT
< Server: Apache
< Location: https://downloads.hamaralinux.org/final/hamara_1.0.3_amd64.iso
< Content-Length: 270
< Content-Type: text/html; charset=iso-8859-1
<
* Ignoring the response-body
{ [270 bytes data]
######################################################################## 
100.0%* Connection #0 to host downloads.hamaralinux.org left intact
* Issue another request to this URL: 
'https://downloads.hamaralinux.org/final/hamara_1.0.3_amd64.iso'
* Found bundle for host downloads.hamaralinux.org: 0x560da04352d0
*   Trying 81.187.100.26...
* Connected to downloads.hamaralinux.org (81.187.100.26) port 443 (#1)
* found 180 certificates in /etc/ssl/certs/ca-certificates.crt
* found 724 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.2 / ECDHE_RSA_AES_128_GCM_SHA256
* 	 server certificate verification OK
* 	 server certificate status verification SKIPPED
* 	 common name: *.hamaralinux.org (matched)
* 	 server certificate expiration date OK
* 	 server certificate activation date OK
* 	 certificate public key: RSA
* 	 certificate version: #3
* 	 subject: OU=Domain Control Validated,CN=*.hamaralinux.org
* 	 start date: Tue, 01 Sep 2015 08:23:38 GMT
* 	 expire date: Thu, 29 Sep 2016 12:40:03 GMT
* 	 issuer: C=US,ST=Arizona,L=Scottsdale,O=GoDaddy.com\, 
Inc.,OU=http://certs.godaddy.com/repository/,CN=Go Daddy Secure 
Certificate Authority - G2
* 	 compression: NULL
* ALPN, server did not agree to a protocol
 > GET /final/hamara_1.0.3_amd64.iso HTTP/1.1
 > Host: downloads.hamaralinux.org
 > User-Agent: curl/7.45.0
 > Accept: */*
 >
< HTTP/1.1 200 OK
< Date: Tue, 13 Oct 2015 04:28:58 GMT
< Server: Apache
< Last-Modified: Wed, 30 Sep 2015 10:27:33 GMT
< ETag: "42800000-520f460e949e8"
< Accept-Ranges: bytes
< Content-Length: 1115684864
< Content-Type: application/x-iso9660-image
<
{ [8192 bytes data]
#
                        1.5%

$ ll -h debian-stretch-DI-alpha3-amd64-DVD-1.iso
-rw-r--r-- 1 shirish shirish 30M Oct 13 10:11 
debian-stretch-DI-alpha3-amd64-DVD-1.iso


See you all in the evening :)

-- 
Regards,
Shirish Agarwal,
Community Lead,
Hamaralinux.org